📄 WordPress Easy Quotes 1.2.2 Unauthenticated Blind SQL Injection

WordPress Easy Quotes plugin version 1.2.2 contains an unauthenticated time-based blind SQL injection vulnerability through REST. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit demonstrates the...

CVE-2025-26943

creationtimestamp| type| source ---|---|--- 2025-02-25 17:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizfyjgmon2s 2025-02-25 17:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114065783940118160 2025-02-26 00:01:00+00:00| seen|...

CVE-2025-26943

CVE-2025-26943 affects the WordPress plugin Easy Quotes (versions